New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Wtf

by noobnooc in noobnooc/agent

Pre-launch and pre-commit audit for vibe coding projects. An agent skill from noobnooc/agent.

No licenceAuto-check: notesDatabases

Install Wtf

skills CLI
$ npx skills add noobnooc/agent --skill wtf -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install noobnooc/agent wtf --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/noobnooc/agent.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/wtf .claude/skills/wtf && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
wtf
GitHub stars
1.4k
Token cost
~2.1k tokens
SKILL.md length
961 words
Files
2
Skills in repo
2
Repo updated
First seen
Licence
None found

At a glance

Pre-launch and pre-commit audit for vibe coding projects. An agent skill from noobnooc/agent.

  • Works in 7 steps: Map the project → Check repository hygiene → Check secrets and environment variables → …
  • Asked to check whether a project is ready to ship
  • SKILL.md covers Operating Mode, Audit Workflow, Useful Commands and Severity, plus 2 more sections
  • Calls git, npm and rg; needs JWT_SECRET and SECRET_KEY

What it does

Wtf is an agent skill from noobnooc/agent. Pre-launch and pre-commit audit for vibe coding projects. Use when asked to check whether a project is ready to ship, deploy, merge, or commit, especially for common AI-built app mistakes: broken project structure, committed secrets or cache files, environment variable hygiene, database migrations, ORM/schema drift, unsafe raw SQL, unused legacy code, dead routes/components, weak auth, missing tests, build failures, and deployment footguns.

Its SKILL.md is about 2.1k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files (for example `agents/openai.yaml`).

It sits in Databases, covering ORMs and data access, Secrets management and Legacy modernization. It works with SQL and Git. The repository describes itself as: My profile & the agent skills I created.

When your agent uses it

  • Asked to check whether a project is ready to ship
  • Especially for common AI-built app mistakes: broken project structure
  • Committed secrets
  • Environment variable hygiene

Example prompts

  • “/wtf”

Requirements

  • A credential in JWT_SECRET
  • A credential in SECRET_KEY

Workflow steps

7 steps, taken from the first numbered list in SKILL.md.

  1. Map the project
  2. Check repository hygiene
  3. Check secrets and environment variables
  4. Check database readiness
  5. Check app correctness and security basics
  6. Check dead and legacy code
  7. Check deployment shape

What it can do on your machine

Read from SKILL.md and the folder at commit 1f594b5. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • git
    • npm
    • rg

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use git and npm, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names these keys or tokens, usually read from environment variables:

    • JWT_SECRET
    • SECRET_KEY
    • API_KEY
    • ACCESS_TOKEN
    • REFRESH_TOKEN
    • WEBHOOK_SECRET
    • STRIPE_SECRET
    • OPENAI_API_KEY
    • ANTHROPIC_API_KEY

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Wtf loads about 2.1k tokens when it runs. Until then it costs about 112 tokens; SKILL.md has 961 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~112
When it runs · the whole SKILL.md, loaded when a task matches
~2.1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NoteMentions a .env fileSKILL.md:26
    - Look for committed `.env*` files other than safe examples, local database files, logs, cache directories, build out

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 961 words (~2,052 tokens).

“Use this skill as a hard-nosed pre-launch or pre-commit audit for fast-moving "vibe coded" projects. The goal is to find concrete blockers before code is shipped, not to produce a generic best-practices essay.”

— opening of SKILL.md by noobnooc
name
wtf

Read the full SKILL.md on GitHub

Files

SKILL.md and 1 other file in skills/wtf of noobnooc/agent.

  • SKILL.md
  • agents/openai.yaml

Open the folder on GitHubat commit 1f594b5

Compare with similar skills

Wtf next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Wtf compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Wtf this skillnoobnooc/agent1.4k—~2.1kAutomated safety check: NotesNone
Flux Migratejeremylongshore/tons-of-skills-marketplace2.8k—~1.9kAutomated safety check: NotesMIT
DB Migrationskurealnum/dotfiles290—~820Automated safety check: PassNone
Archestra Dev Migrationsarchestra-ai/archestra4.4k—~804Automated safety check: PassCustom licence
Migrationstheopenco/llmgateway1.7k—~1.1kAutomated safety check: PassCustom licence
Drizzle Migration Rolloutlobehub/lobehub83k—~3.5kAutomated safety check: NotesCustom licence

Similar skills

  • Flux Migrate

    jeremylongshore/tons-of-skills-marketplace

    Build zero-downtime database migrations — forward SQL, rollback SQL, deployment sequence.

    2.8k GitHub stars~1.9k tokensUpdated yesterday
    DatabasesAuto-check: notes

  • DB Migrations

    kurealnum/dotfiles

    A skill your agent uses when generating or regenerating Drizzle migration files, changing database schema tables or columns, resolving migration sequence conflicts after rebase, reviewing migration…

    290 GitHub stars~820 tokensUpdated 5 mo ago
    DatabasesAuto-check passed

  • Archestra Dev Migrations

    archestra-ai/archestra

    A skill your agent uses when changing Drizzle schemas, generating migrations, editing migration SQL, creating data-only migrations, diagnosing drizzle-kit check failures, or resolving…

    4.4k GitHub stars~804 tokensUpdated today
    DatabasesAuto-check passed

  • Migrations

    theopenco/llmgateway

    Generate, review, edit, apply, or resolve conflicts for Drizzle database migrations in this repo.

    1.7k GitHub stars~1.1k tokensUpdated today
    DatabasesAuto-check passed

  • Drizzle Migration Rollout

    lobehub/lobehub

    Covers schema conventions and safe rollout for Drizzle database migrations: online indexes, backfills, idempotent SQL and fixing regeneration or rebase conflicts.

    83k GitHub stars~3.5k tokensUpdated today
    DatabasesAuto-check: notes

  • Daoyou Data Layer

    ChurchTao/Daoyou

    Daoyou Drizzle/PostgreSQL、事务、V6 角色与宗门归属、统一背包、Redis 战局和回放归档指南。Use when modifying schema, migrations, repositories, persistence mappers, resource commits or durable game models.

    146 GitHub stars~1.9k tokensUpdated today
    DatabasesAuto-check passed

More from noobnooc/agent

  • Better Codex

    noobnooc/agent

    Behavioral guardrails for Codex coding work based on common user complaints.

    1.4k GitHub stars~3.2k tokensUpdated 1 mo ago
    Auto-check passed

Works with

Categories

Questions about Wtf

What does Wtf do?

Pre-launch and pre-commit audit for vibe coding projects. An agent skill from noobnooc/agent. Wtf is an agent skill from noobnooc/agent. Pre-launch and pre-commit audit for vibe coding projects.

When should I use Wtf?

Wtf fits situations like: asked to check whether a project is ready to ship; especially for common AI-built app mistakes: broken project structure; committed secrets; environment variable hygiene.

How do I install Wtf in Claude Code?

Run `npx skills add noobnooc/agent --skill wtf -a claude-code`. Or copy the skill folder (skills/wtf in noobnooc/agent) into .claude/skills/wtf in your project. Claude Code loads it when a task matches its description.

How do I install Wtf in Codex?

Run `npx skills add noobnooc/agent --skill wtf -a codex`. Or copy the skill folder (skills/wtf in noobnooc/agent) into .agents/skills/wtf in your project. Codex loads it when a task matches its description.

Can I use Wtf in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add noobnooc/agent --skill wtf -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/wtf, .gemini/skills/wtf, .github/skills/wtf and .opencode/skills/wtf in your project.

What does Wtf need to run?

Going by SKILL.md and its folder, Wtf needs the command-line tools its instructions call (git, npm and rg) and credentials named JWT_SECRET, SECRET_KEY, API_KEY and ACCESS_TOKEN. Our summary lists: A credential in JWT_SECRET; A credential in SECRET_KEY.

Does Wtf access the network?

SKILL.md contains no URLs. Its commands use git and npm, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Wtf safe to install?

Our automated static check of SKILL.md found notes only (mentions a .env file), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does Wtf use?

No licence was found for Wtf or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Wtf use?

About 2.1k tokens (SKILL.md is roughly 8.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Wtf?

Skills that share tags, products or a category with Wtf: Flux Migrate (jeremylongshore/tons-of-skills-marketplace, 2.8k stars), DB Migrations (kurealnum/dotfiles, 290 stars), Archestra Dev Migrations (archestra-ai/archestra, 4.4k stars) and Migrations (theopenco/llmgateway, 1.7k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Wtf?

noobnooc (a GitHub user) maintains it in noobnooc/agent, which has 1,387 GitHub stars. The repository holds 2 skills in this directory. The repository was last updated on August 18, 2026.

Source: noobnooc/agent on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.